Privacy and cookie policy
On this page we explain what personal data we process on Adelaide Link, for what purpose, on what legal basis, for how long, who we share it with and how you can exercise your rights. We also explain the cookies and similar technologies the website uses.
Data controller
- Owner
- Pau Romaní
- Address
- Passeig Mare de Déu del Coll 70, 08023 Barcelona, Spain
- NIF
- 23928922K
Summary
| What | Purpose | Legal basis | How long |
|---|---|---|---|
| Contact messages | Replying to you | Our legitimate interest in dealing with your questions | As long as needed to reply to you and, after that, up to one year |
| Requests to add or change a business | Reviewing and publishing them and communicating with you | Your request | Unconfirmed ones, 48 hours; accepted ones, while the listing exists (and at least one year after you sent it); rejected ones, one year after you sent it |
| Messages to a business from its listing | Passing them on to the business | Your request | Not stored on the website |
| Subscription to the Featured plan | Managing the subscription and invoices | The contract | As required by tax law |
| Data of the businesses in the directory | Letting the public find and compare them | Legitimate interest | While the business remains active or until it asks to be removed |
| Requests to remove a listing (email address, reason, relationship with the business, phone number, IP address and any proof you upload) | Checking who is asking, deciding on it and being able to justify the decision | Our legitimate interest and, if the listing is yours, your right to object | Unconfirmed ones, 48 hours; the rest, three years after they are resolved; any proof you upload is deleted when it is resolved |
| Checking who is asking to change or remove a listing (encrypted hashes of their email address and of their IP address) and notice to the business's contact email address | Preventing fraud and the impersonation of businesses | Our legitimate interest and that of the businesses | The hashes, 30 days (180 if the business cancels the request); the link in the notice expires after 48 hours |
| Your location, if you ask to sort by distance | Showing you the nearest businesses | Your request | The approximate one from your IP address, 30 days; the precise one is not stored |
| Blog comments | Publishing and moderating them | Your consent when you submit them | While the comment is published |
| Technical server logs | Security and operation of the website | Legitimate interest | As set by our hosting provider |
If you write to us
When you write to us using the contact form, we process your name, your email address, the reason, what you tell us and, depending on the reason, the link you are reporting or the right you wish to exercise, only to reply to you and deal with your request. The legal basis is our legitimate interest in assisting you and, if you ask to exercise a right, our legal obligation to reply to you. Messages reach us by email and their text is not stored on the website, which only keeps, for one year, a log of the emails it sends (address and subject). In our mailbox we keep them for as long as needed to assist you and, after that, for up to one year in case we need to show how we did so.
Next to the contact form we tell you who the controller is and what we use your data for, with a link to this policy, as recommended by the Spanish Data Protection Agency.
If you write to a business from its listing
Each listing has a form for writing to the business. Through it we process your name, your email address, the subject and your message in order to pass them on to the business: if the business has given us a contact email address, the message goes directly to that address and from then on the business handles it; if not, it reaches us. The legal basis is your own request. The message is not stored on the website.
If you ask to add or change your business
With the “Add your business” form we process the business details you send us (name, address, phone number, website, opening hours, description, photos, links, the link to its Google profile, which we check to complete the request, and your notes), the reviews you choose or add with the Featured plan and your email address, to review the request, publish the listing if we accept it and communicate with you. In those emails we also tell you about the benefits for businesses. The legal basis is your own request. The business details are published on the website once accepted; your email address is not published, nor is the contact email you give us with the Featured plan: it receives the messages that visitors send you from your listing. We keep accepted requests while the listing exists (and at least one year after you sent them) and rejected ones for one year after you sent them.
To check that the email address you enter is yours, we send you a link: the request does not reach us until you click it, and if you do not click it within 48 hours it is deleted, together with anything you uploaded. To manage your listing (correct it, feature it or remove it), you enter your email address on your business management page, and we also compare it with the published details of the listing to know whether it is yours. We store your email address with the request, the date and your IP address; we send the acknowledgement to that email address.
If you subscribe to the Featured plan
To manage the subscription, we process the subscription and billing details (name or company name, address, tax number, email address, plan and payments). Payments are processed by the payment providers (Stripe, Inc. (United States), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)) on their own behalf, as controllers of that data: we do not see or store your card details. The legal basis is the contract, and we keep invoices and billing details for as long as tax law requires.
If you pay with PayPal, we send your billing details to Stripe to issue your invoice, which is kept in our Stripe account.
Data of the businesses in the directory
This directory publishes information about businesses and professionals: name, address, phone number, website, opening hours, photos, category, rating and reviews. We obtain it from publicly available sources, mainly the profiles that the businesses themselves publish on Google Maps, and from what the businesses send us. When the business is an individual (a professional or a sole trader), this data is personal data.
- Purpose: to let the public find and compare businesses in Australia.
- Legal basis: our legitimate interest, and that of the public, in providing and receiving information about businesses that have already made themselves publicly known. We only publish business details, the same ones the business has made public so that people can find it.
- Retention: while the business remains active or until it asks us to remove it.
- Your rights: if your business appears here, you can correct its details, object to its publication or ask us to remove it at any time from your business management page, giving a brief reason. When we remove a listing, we pass it on to the website software provider, which includes it in its exclusion register: it will not be published again on any website made with that software (see “The website software”).
The business descriptions are written with the help of artificial intelligence services, to which we send the public data of the business and the text of its reviews; we do not send them any data about website visitors.
As we do not always have a way to contact each business, and contacting all of them would involve a disproportionate effort, we make this information available to everyone here (Article 14(5)(b) of Regulation (EU) 2016/679).
Reviews and their authors
The reviews come mainly from Google Maps, with the name and photo their author chose to display there; the photo is loaded from Google's servers. Businesses on the Featured plan can add reviews that they send us as being from their customers. Some may be shown automatically translated. The legal basis is the public's legitimate interest in knowing what other customers think. We do not check that their authors have been customers of the business. If you wrote a review and do not want it to appear here, write to us from the contact page choosing the reason “My personal data” and including the link to the page, and we will remove it; your name will be recorded in the exclusion register of the website software provider, so that your reviews are not published again on any website made with that software.
Security and abuse prevention
To limit the number of submissions, we use a hash of your IP address for one hour at most. If you ask for a listing to be removed or changed from your business management page, we store your IP address with the request, so that we can show who asked for it. We also keep, in shortened form, the IP address of submissions that the system blocks as automated. The legal basis is our legitimate interest in protecting the website.
Checking who is asking to change or remove a listing
So that no one can change or remove the listing of a business that is not theirs, when you ask for a change or a removal from your business management page we record, for 30 days, an encrypted hash of your email address and another of your IP address (not the email address or the IP address itself), together with the listing and the type of request. This lets us know whether changes to or removals of other businesses are being requested from the same email address or the same connection. If there are several in a short time and we have not been able to verify that they are yours, we do not accept any more by this means, and you can write to us from the contact page. If a business cancels one of your requests, we keep those hashes for 180 days to take it into account in later ones.
If the person asking for a listing to be removed, or for a change to its name, phone number, website, Google link or contact email address, has not been able to show that the listing is theirs, and the business gave us a contact email address, we send a notice to that address with a link to cancel the request within 48 hours. The notice says what has been requested, but not who requested it.
The legal basis is our legitimate interest, and that of the businesses, in preventing fraud and impersonation. No request is decided on this alone: each one is reviewed by a person. You can object by writing to us from the contact page choosing the reason “My personal data”.
Maps
The maps in the listings are shown with data from OpenStreetMap (© OpenStreetMap contributors, ODbL licence); the map images are served by the OpenStreetMap Foundation (United Kingdom), which receives your IP address in order to send them.
Sorting by distance
If you ask to sort the businesses by distance or to see the ones near you, we use your location: the precise one from your browser, if you give it permission, or an approximate one based on your IP address. The approximate one is provided to us by the website software provider (directorai.org). We store it for 30 days, linked to a hash of your IP address, so as not to request it again; the precise one is not stored. To place on the map an address you type, or your position, we send the address or the coordinates, rounded, to Nominatim (OpenStreetMap Foundation) or to Photon (komoot GmbH, Germany), and we store the response for 30 days. The legal basis is your own request.
Some photos of the businesses and the photos of review authors are loaded from Google's servers, which receive your IP address in order to send them.
Website performance and delivery
To make the website load quickly, we keep copies of its pages on the server (LiteSpeed Cache). Fonts are served from the website itself.
The website software
This website runs on the DirectorAI software, from its provider (directorai.org), which processes some data on our behalf, as processor: only on our instructions and under a contract that requires it to do so.
- For the operation and support of the website, the software sends it encrypted technical notices: to which address, with which subject and about which business or person the website sends an email.
- When you ask to sort by distance, the software asks it which approximate location corresponds to your IP address: the provider looks it up in its location database, returns the answer to us and does not store it.
Exclusion register. The provider also keeps, as controller on its own behalf, an internal register of the businesses and review authors that must not be published again. When we remove a listing or a review, we pass on to it the name and address of the business, or the name of the review's author, together with what the page showed, and it decides whether to include them. What is in the register is not published again on any website made with its software, whoever owns it: if your business asks to be removed from this website, it will not appear again on any website generated with DirectorAI. The register belongs to the provider and nobody else has access to it: the software only consults it, encrypted, so as not to publish again what it contains. The legal basis is its legitimate interest, and that of the people concerned, in having a removal respected across all those websites. To find out whether you are in the register, to be removed from it or to ask to be included, write to it at info@directorai.org.
The provider also processes on its own behalf, as controller, the data on subscriptions to the Featured plan, to calculate the commission we pay it for the software, on the basis of its legitimate interest in collecting it.
Server logs
Like any website, the server records each visit (IP address, date and time, page, browser) for the period set by our hosting provider, for security and technical operation. The legal basis is our legitimate interest; we do not use these logs to identify you.
Who we share data with
We do not sell your data. The following providers process it on our behalf, only to provide their service to us:
- DirectorAI (directorai.org) (Spain): website software: technical notices and approximate location
- Google LLC (United States): photos of the businesses and of review authors
- OpenStreetMap Foundation (Nominatim) (United Kingdom): approximate location and placing addresses on the map
- OpenStreetMap Foundation (United Kingdom): maps
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): collecting payment for paid plans
- komoot GmbH (Photon) (Germany): approximate location and placing addresses on the map
- Stripe, Inc. (United States): collecting payment for paid plans
What the website software provider does with the data is explained in “The website software”.
We also disclose data to the authorities when the law requires us to.
International transfers
Some of these providers are located in countries other than yours, such as the United States or the United Kingdom. When data leaves the European Economic Area, transfers are based on adequacy decisions of the European Commission (United Kingdom, Switzerland and, for participating companies, the EU-U.S. Data Privacy Framework) or on the European Commission's standard contractual clauses.
How long we keep data
The retention periods for each processing activity are in the summary at the top. After those periods, we delete or anonymise the data, unless the law requires us to keep it longer.
Your rights
You can access your data, rectify it, erase it, restrict its processing, object to it, request its portability and withdraw your consent where you have given it.
To exercise them, write to us from the contact page (reason “My personal data”) or at promani.webs@gmail.com. We will reply within 30 days. It is free of charge, and we will only ask you for further details if we need to verify your identity.
Complaints
If you believe we have not handled your data properly, you can lodge a complaint with Agencia Española de Protección de Datos (AEPD) (https://www.aepd.es); Office of the Australian Information Commissioner (OAIC) (https://www.oaic.gov.au). We would appreciate it if you wrote to us first, in case we can resolve it.
If you are in Australia: you can complain to us in writing about how we handle your data; we will look into it and reply within 30 days. If you are not satisfied with the response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). Some data is likely to be transferred to the United States, the United Kingdom and countries of the European Union, where the providers listed above are located.
Children
This directory is not aimed at children under 15 and we do not knowingly collect their data. If you are under that age, do not send us any personal data.
Automated decisions
The order of the businesses and their score out of 10 are calculated automatically by comparing each business with the others in its listing, based on its rating and number of reviews on Google and on whether it shows a website, opening hours and photos. We do not make automated decisions that produce legal effects concerning anyone or significantly affect them.
Cookies and similar technologies
Cookies are small files that a website stores in your browser; the browser's local storage works in a similar way. This website uses the following:
| Cookie or storage | Set by | Purpose | Type |
|---|---|---|---|
comment_author_*, comment_author_email_*, comment_author_url_* | This website | Remember your details for the next comment | Technical |
dai-fp:*, dai-fp-resenas:* (sessionStorage) | This website | Remember what you type in the listing form while you fill it in | Technical |
_lscache_vary | LiteSpeed Cache | Serve the right version of cached pages | Technical |
wordpress_logged_in_*, wp-settings-* | WordPress | Keep administrators logged in | Technical |
Technical ones are necessary for the website to work and do not require your consent.
Do Not Track
The website does not change how it works when your browser sends a “Do Not Track” signal.
Changes to this policy
We may update this policy when the website, the services it uses or the law changes. The version in force is always the one published here, with its date.
Last updated: October 21, 2026